CVE-2022-25907

Name of the Vulnerable Software and Affected Versions ts-deepmerge versions prior to 2.0.2

Description The issue is related to Prototype Pollution due to missing sanitization of the merge function. This allows for potential manipulation of the prototype, leading to various security issues.

Recommendations For versions prior to 2.0.2, update to version 2.0.2 or later to resolve the issue. As a temporary workaround, consider disabling the merge function until a patch is available. Restrict access to the merge functionality to minimize the risk of exploitation.